From: Hanchett, James (DPH) 

Sent: Monday, November 19, 2012 1:22 PM 

To: Salem, Sharon (DPH) 

Subject: Re: UMass Security Issue 


Thanks 

Sent via BlackBerry from T-Mobile 


From: "Salem, Sharon (DPH)" < Sharon.Salem@MassMail.State.MA.US > 
Date: Mon, 19 Nov 2012 13:01:41 -0500 

To: Hanchett, James (DPH)< James.Hanchett@MassMail.State.MA.US > 
Subject: RE: UMass Security Issue 

Already did. 


From: Hanchett, James (DPH) rmailto:iames.hanchett@massmail.state.ma.usl 
Sent: Monday, November 19, 2012 1:00 PM 
To: Salem, Sharon (DPH) 

Subject: FW: UMass Security Issue 

Sharon, Could you handle this? 


From: Cronin, John (POL) 

Sent: Monday, November 19, 2012 12:01 PM 
To: Salem, Sharon (DPH); Hanchett, James (DPH) 

Cc: Connolly, James, Major (POL); Sullivan, Kristen (POL); Miller, Jeremy (POL); Juhascik, Matthew (POL) 

Subject: FW: UMass Security Issue 

Jim - could you send me the contact info at UMass for this? I'd like to explore more control of this system with UMass- 
perhaps including the installation of our own system. 


From: Connolly, James, Major (POL) 

Sent: Monday, November 19, 2012 11:26 AM 
To: Vallaro, Guy (POL) 

Cc: Cronin, John (POL); Juhascik, Matthew (POL); Sullivan, Kristen (POL) 
Subject: Re: UMass Security Issue 

John, 

Can you address ASAP? 

Thanks 

Major James M. Connolly 


l 


Folk OIG PRR 099474 









On Nov 19, 2012, at 11:23 AM, "Vallaro, Guy (POL)" <Gu y .Vallaro @M ass Mail.State.MA.US > wrote: 


I think this needs to be addressed sooner than later, particularly the vault area 


From: Salem, Sharon (DPH) 

Sent: Monday, November 19, 2012 10:35 AM 
To: Cranstoun, Bruce (POL) 

Cc: Vallaro, Guy (POL) 

Subject: UMass Security Issue 


Hi Bruce, 

I want to inform you of a security issue we just discovered with UMass. Last week UMass updated the 
‘card swipe’ access hardware into our labs and safe. It took them a few days to work out the kinks with 
wiring. Apparently they were here over the weekend working on it. Come to find out from UMass’ Mark 
Harrison this morning, there is a software default code in their system that has been allowing up to 4 
other UMass employees all-access to our doors for quite some time. Mark was unaware of this situation 
until this morning when one of these people came by to check our doors. Mark has corrected the 
problem and supposedly it is ‘just us’ within the lab with access now. 

The door access is separate from the alarm system. As far as I know the alarm was not tripped over the 
weekend, so no one was actually in the labs or safe area. However, UMass also is in control of the alarm 
system. If door access can be compromised, cannot also the alarm system? 

We are not fully confident in UMass’ ability to handle the security of the drug lab. 

StuVUW. 

Sharon Salem 
Amherst Drug Laboratory 
Department of State Police 
637 N. Pleasant Street 
Amherst, MA 01003 
413-545-2601 
413-545-2608 (fax) 
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